Microsoft Security Response Center Blog Alerts

Improper authorization of an index that contains sensitive information from a Global Files search in Windows Defender allows an authorized attacker to disclose information over a network.

Information published.

Information published.

Information published.

Information published.

To comprehensively address CVE-2023-36435, Microsoft has released security updates on October 24, 2023 for .NET 7.0.

Microsoft recommends that customers running .NET install the updates to be fully protected from the vulnerability.

Information published.

Information published.

Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure.

Information published.